American Specialty Health Incorporated (ASH) is seeking an Application Security Engineer II to join our Information Security department. The primary purpose of this position is to protect and defend the information security posture and information assets from cyber security threats; maintain strong regulatory compliance; and reduce cyber risks to the organization.
Salary Range
- American Specialty Health complies with state and federal wage and hour laws and compensation depends upon candidate’s qualifications, education, skill set, years of experience, and internal equity. $89,300 to $120,000 Full-Time Annual Salary Range.
Remote Worker Guidelines
- Remote Worker Guidelines: This position will be trained remotely and must be able to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires you have a stable connection to your Internet Service Provider with the ability to participate by video in online meetings over a reliable and consistent network. The internet connection must have a consistent 50 down/10 up Mbps minimum internet speed. 100 down/20 up is recommended to support higher quality video meetings.
Responsibilities
- Assist with documentation of improvements (including automation) of information security solutions in concert with DevSecOps activities.
- Deploy and/or serve as product owner for at least one of the products within the app security stack.
- Assist with administration of security-related systems including but not limited to: Security and compliance testing software, web application firewalls, open source software, attack simulation, and vulnerability management.
- Assist with coordination of security issue and remediation efforts between different ASH scrum teams.
- Act as point of contact for ASH scrum teams to inquire about vulnerabilities and options for remediation.
- Maintains updated documentation of technical controls, processes and procedures.
- Participates in incident response, security testing, penetration testing and red teaming roles.
- Researches and communicates the latest trends in information security and threat environments.
- Availability for after hours work and occasional travel required.
- Performs other duties as assigned.
- Complies with all policies and standards.
Qualifications
- Bachelor’s Degree in IT related field or relevant work experience. If equivalent experience, high school diploma required.
- 5 years in software development with security focus, systems/software security testing, and/or security administration required.
- Ability to program/script automations across languages and platforms, including consumption and processing of common API results. (High proficiency)